Privacy Policy

Clinics On Cloud ("we", "us") respects your privacy. This policy explains what personal data we collect in the United Arab Emirates through this website and through our Health ATMs, Box Clinics and Health Lounges, why we collect it, and what you can ask us to do with it. It is written for the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the "PDPL") and, for health information, for Federal Law No. 2 of 2019 on the Use of Information and Communication Technology in Health Fields (the "ICT Health Law") and the rules of the health authority where a screening takes place: the Dubai Health Authority (DHA), the Department of Health - Abu Dhabi (DOH) or the Ministry of Health and Prevention (MOHAP).

We decide how and why the personal data described here is processed. Our office is at 25A St, Al Quoz Industrial Area 3, Al Quoz, Dubai, UAE.

The enquiry form asks for:

• Your full name
• Your company or organisation (optional)
• Your phone number
• Your work email address
• Your country
• The products you are interested in, and anything you choose to write in the message box

With the enquiry we also record the page you sent it from and the time it was sent. The newsletter form asks only for your email address. A job application asks for your name, email, phone, LinkedIn profile (optional), a note (optional) and your CV. A product review asks for your name, your role and organisation (optional), your email (optional, never published), a star rating and your review.

A health screening collects information about your health, which the law treats as sensitive. Depending on the tests you choose, this may include:

• Your name, phone number and, where you give them, your email address, age and gender
• The measurements taken during the screening, across the screening areas the unit offers: vitals and body composition, blood tests, heart, lungs, vision and hearing
• Your screening report and any record of a teleconsultation that follows it
• Where an employer, insurer or other organisation pays for the screening, the details needed to bill them. We do not share your individual results with an employer.

We process health information only with your consent, or where the law otherwise allows it. The unit asks for your consent on screen before the screening starts, and you can stop at any point.

See section 7, Cookies and Tag Manager.

• Enquiries: to reply to you, arrange a demo or quotation, and follow up on your request.
• Newsletter: to send you product news, only if you subscribed. Every newsletter email tells you how to unsubscribe.
• Job applications: to assess your application for the role you applied for.
• Reviews: to moderate your review and, once approved, show it on the product page with your name and organisation.
• Screenings: to carry out the screening, give you your report, and connect you to a licensed healthcare professional where you ask for it.
• Service and safety: to keep our units and systems working, secure and accurate.
• Legal duties: to meet the obligations that apply to us, including the record-keeping that UAE health and tax law requires.

We do not sell personal data. We do not use your health information for marketing.

The ICT Health Law requires health data about patients in the UAE to be stored and processed inside the UAE, except in the cases the law and the health authorities allow.

• Enquiries and newsletter subscriptions: 24 months after our last contact with you, or until you ask us to delete them, whichever comes first.
• Job applications: 12 months after the role is filled, unless you ask us to keep your CV on file for longer.
• Screening records: at least 25 years from the last screening, the period the ICT Health Law sets for health records.
• Anything else: no longer than we need it for the purpose it was collected for, unless the law requires us to keep it longer.

When the period ends we delete the information or remove anything that identifies you.

• Our own team, and Sehatpro Technologies Pvt. Ltd. in India, which develops and runs the Clinics On Cloud platform on our behalf.
• Healthcare professionals who give you a teleconsultation that you ask for.
• Service providers who host our systems and send our messages on our behalf (hosting, email and WhatsApp messaging), under agreements that require them to protect your data.
• Authorities where the law requires it.

Some of these parties process personal data outside the UAE: our systems are hosted in the United States and our platform team works from India. We transfer personal data outside the UAE only where the PDPL allows it, and health data only where the ICT Health Law allows it (section 3).

This website and our systems use encrypted (HTTPS) connections, and access to personal data is limited to people who need it for their work. Health records, our database and its backups are encrypted. If a breach puts your personal data at risk, we will tell you and the UAE Data Office as the PDPL requires.

When you first visit, a notice asks you to choose "Essential only" or "Accept all". Until you choose, and if you choose "Essential only", this website sets no analytics or advertising cookies.

• Essential: the site remembers your cookie choice in your browser. When you choose a language, a small cookie ("googtrans") remembers it, and Google Translate translates the page.
• Accept all: the site loads Google Tag Manager, which runs the analytics and advertising tags we have set up in it - for example Google Analytics, Google Ads or the Meta Pixel - to understand which pages are useful and to measure our advertising.
• Third parties: the page loads its fonts from Google Fonts and some videos from YouTube, so those services receive your device's IP address in the ordinary way.

You can change your choice at any time with "Cookie preferences" at the foot of every page. Choosing "Essential only" after accepting removes the analytics cookies and reloads the page.

Under the PDPL you may:

• Ask what personal data we hold about you and how we use it, and receive a copy of it
• Ask us to correct data that is wrong or out of date
• Ask us to delete data we no longer have a right to keep
• Ask us to restrict or stop processing your data, including for direct marketing
• Object to decisions made about you only by automated processing
• Withdraw a consent you gave, without affecting what was done before
• Complain to the UAE Data Office

To use any of these rights, contact us (below). We may ask you to confirm who you are before we act on a request, and we will answer within the time the law allows.

• Data protection contact: write to sales@clinicsoncloud.com.
• Email: sales@clinicsoncloud.com
• Phone: +91 8999 073 447
• Address: 25A St, Al Quoz Industrial Area 3, Al Quoz, Dubai, UAE

If you are not satisfied with how we have handled your personal data, you may complain to the UAE Data Office. For health information, you may also contact the health authority where your screening took place (DHA in Dubai, DOH in Abu Dhabi, or MOHAP in the other emirates).

We may update this policy. The date at the top shows when it last changed, and a significant change will be shown on this website before it takes effect.